Blackbox — API Reference

GET /api/v1/:ip Free

Simple text-based reputation check. Accepts up to 8 comma-separated IP addresses. Returns a comma-separated list of Y (block recommended) or N (allow) per IP. Returns E for any invalid or unresolvable address. Response is plain text (Content-Type: text/plain).

Example request

curl https://blackbox.ipinfo.app/api/v1/1.1.1.1
curl https://blackbox.ipinfo.app/api/v1/1.1.1.1,8.8.8.8,192.168.1.1

Example response

N
N,N,Y

GET /lookup/:ip Free

Alias for /api/v1/:ip. Identical behaviour and response format. Exists for backwards compatibility with older integrations.

Example request

curl https://blackbox.ipinfo.app/lookup/1.1.1.1

GET /api/v2/:ip RapidAPI Key Required

Full JSON reputation check. Accepts up to 64 comma-separated IP addresses. Returns a JSON array — one object per IP — with detailed detection flags, ASN attribution, and a block/allow suggestion. Requires the X-RapidAPI-Proxy-Secret header (automatically injected when called via RapidAPI).

Example request

curl -H "X-RapidAPI-Proxy-Secret: <key>" \
     https://blackbox.ipinfo.app/api/v2/1.1.1.1

Example response

[
  {
    "ip":         "1.1.1.1",
    "error":      null,
    "asn": { "number": 13335, "description": "CLOUDFLARENET" },
    "detection": {
      "bogon":    false,
      "cloud":    true,
      "hosting":  false,
      "proxy":    false,
      "spamhaus": false,
      "tor":      false
    },
    "suggestion": "allow"
  }
]

GET /api/v2/obj/:ip RapidAPI Key Required

Same as /api/v2/:ip for a single IP, but returns a JSON object directly rather than a single-element array. More convenient when you only need one result and want to avoid unwrapping an array.

Example request

curl -H "X-RapidAPI-Proxy-Secret: <key>" \
     https://blackbox.ipinfo.app/api/v2/obj/8.8.8.8

POST /api/v2/ RapidAPI Key Required

Batch check via POST body. Send a JSON body with an ips array. Returns a JSON array with one result object per IP, in the same order. Useful for batch processing in server-side scripts where a GET URL would be unwieldy.

Request body

Field	Type	Description
ips	string[]	Array of IP address strings to check.

Example request

curl -X POST \
     -H "X-RapidAPI-Proxy-Secret: <key>" \
     -H "Content-Type: application/json" \
     -d '{"ips":["1.1.1.1","8.8.8.8"]}' \
     https://blackbox.ipinfo.app/api/v2/

Detection flag reference

Every v2 response includes a detection object with these boolean flags. suggestion is "block" if any flag is true, otherwise "allow".

Flag	Type	Description
bogon	bool	True if the IP falls within a reserved, private, or unroutable range (RFC 1918, loopback, link-local, documentation ranges, etc.).
cloud	bool	True if the IP is part of a known major cloud provider (AWS, Azure, GCP, etc.) network range.
hosting	bool	True if the ASN is a known hosting provider or data centre operator.
proxy	bool	True if the IP is a known open proxy or anonymisation service.
spamhaus	bool	True if the IP's ASN appears on the Spamhaus bad-ASN list.
tor	bool	True if the IP is a known Tor exit node.